Security Scan Report: ac.wordonfire.org

Redirected to:
https://ac.wordonfire.org/admin/
Submitted: Jul 18, 2026, 10:05:00 PMCompleted: Jul 18, 2026, 10:06:13 PMpubliccompleted
This website contacted 4 IPs in 1 country across 18 domains to perform 56 HTTP transactions. The main domain is ac.wordonfire.org and was registered 25 years ago.

Submitted URL: https://ac.wordonfire.org

Effective URL:

https://ac.wordonfire.org/admin/
Redirected

The Cisco Umbrella rank of the primary domain is #183,125 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 82%

3
Risk Score

The site impersonates ActiveCampaign and harvests credentials; treat as high‑risk phishing.

Risk Factors (3)
Brand impersonation of a well‑known service
Credential collection form on unrelated domain
Low Cisco Umbrella ranking for a claimed brand
Safety Factors (4)
Domain age 9249 days (well‑established)
No malicious YARA or IDS detections
No external credential exfiltration observed
Top-ranked domain (Cisco Umbrella #183,125, 9249 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 8 to 3
Domain age information unavailable

Details

Page Title

ActiveCampaign

Scan Type

public

Domain Name Analysis

The domain 'ac.wordonfire.org' uses the non-profit oriented generic top-level domain (.org), featuring subdomain 'ac'. The core label 'wordonfire' covers 10 characters holding 4 vowels versus 6 consonants. Segmentation suggests 3 words: word, on, fire. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ac.wordonfire.org

Page Load Overview

4.65s
Total Load Time
4.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:85 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network63% confidence
Type: webapp
Method: ml+structural

All Detected Categories

social media network
63%
technology software
46%
documentation technical
34%
social_media
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14104.17.202.31Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
143.171.214.35Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
14172.66.174.86Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
564--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11962C7566CB600146013424867EF672A2C36F253FB40DEF83BED6671CF8A99BAC17719

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:4pVIka3HYpkKjqmOEQIZ7ZJxmdoLuJwJhk1oHmDAmI1kTKxG1yITKxG1o8M8yhIl:4pRjZOVIZ7ZSouuJhk1oGDJ2bO9z

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:15709:MJAT0FWESHiNAiCRBYAQwIpIBAIwAEBJGpMiCZRAbOLBkDDLUEIMFCzBHKKDHlIRBK5dQLhhZWrBJ5KjApFgQhdBIgIAAUCl

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f0e0e0e0e0e0f0e0
Perceptual Hash:e64a992e99a5aa9c
Difference Hash:414145470f45454d
Wavelet Hash:f0f0f0f0e0e0f0f5
Color Hash:#931f48

Scan History

Scan history not available

Unable to load historical scan data